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1. A method for printing a franking mark (28) on a 
document (22), comprising the /following steps: 

a. making available a uniqu/ bit string; 

b. establishing an identification code; 

c. securely printing the yfranking mark (28) on the 
document (22), said /ranking mark at least comprising 
information relating to the bit string and the 
identification 

the bit string is selected from a 
of unique bit strings and that the 
are made available for use are 



characterised in th| 
centrally stored s 
unique bit string 
centrally regist 




red. 



2. A method according to Clai^tf 1, characterised in that, 
prior to step c, the unique Wit string and the 
identification code, protected with the aid of a first 
message authentication c^de and/or protected by encoding, 
are stored by a terminal (2) on an information carrier (18) 
with memory, and step c takes place after the reading of 
the information carrier by a printing device (20) . 
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3. A method According to Claim 2, characterised in that, 
besides the/unique bit string and the identification code, 
a terminal identification code, protected with the aid of 
the fir^t message authentication code and/or by the 
enco^ng, is also stored on the information carrier (18) 
wi^h memory by the terminal (2) . 



fr-irrethod according to Claims ~2"^e*— ^ — she-t auter i^H 

that after the reading of the in forma tio£U--Ga-rrTer (18) by 
the printing device(^ili- r ---«a^r-OT*^^ unique bit string for 
printings — ^CTrther franking mark on a further document is 
rendered impossiblg ^by th^ pri ntin g device (20). ^ 
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ithod according to Claim 2 or 3, characterise? 



that, after reading the information carrier (It 
checked whether the val 
carrier (18) lies withi 



f a countj 



"it is 



the information 



refined limits, and, if this is 



the case, the 



leof the counter is adjusted after 



rea< 



and step c is executed, and, if this is nc 



the 



6. A method according to Claim 1, characterised in that, 
upon execution of sleep c, use is made of a computer (50) 
and a printing devZce connected thereto (62). 



Ally uf the pi cedin g ulaliuil, 



-=7*T ' A * i tlgEhod according 

characterised in that the identification code compr. 



ies a 



user identification code and/or a printer ident indication 
code . 

8. A method according to any of the pr^6eding claims, 
characterised in that on the basis o^the franking mark a 
second message authentication code/is calculated and that 
this also is printed and/or th^/f ranking mark is printed in 
encoded form. 



9. A method according Jlo any of the preceding claims, 
characterised in that/the set of unique bit strings is 
stored in a first central memory (38), used combinations of 
identification cxxies and unique bit strings are stored in a 
second centra^: memory (40) , franking marks printed on 
documents axe read in, combinations of identification codes 
and unigde bit strings which are present in the read-in 
franlotog marks are stored in a third central memory (42) 
and/are compared to the used combinations in the second 
central memory. 
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10. A system for printing a f ranking mark (28) on a 
document (22) , comprising: 

a. means (34) for making available a unique bit string; 

b. means (4; 52) for establishing an identification code; 

c. means (20; 62) for securely printing the franking mark 
(28) on said document/ (22) , said franking mark at 
least comprising information relating to the bit 
string and the itWntif ication code; 

characterised in tft^/qf the means (34) for making available 
10 the unique bit strfafng comprise a first centrally arranged 
memory (38) with/S setoff unique bit strings, from which 
the unique bit/string is selected, and that means are 
provided f or/centrally registering which unique bit strings 
have been ipade available for use. 

11. A system for printing a flanking mark (28) according 
to Claim 10, characterised jm that said system comprises a 
terminal (2) and a printing device (20) , said terminal (2) 
being arranged to store, Arior to step c, the unique bit 

20 string together with th^ identification code, protected 

with the aid of a firs'u message authentication code and/or 
protected by encoding, on an information carrier (18) with 
memory, and the primting device (20) is arranged to execute 
step c after reaching the information carrier, 

25 

12. A system according to Claim 11, characterised in that 
the terminal As arranged to send a copy of either the 
unique bit /tring together with the identification code and 
the f irst yfnessage authentication code, or the unique bit 

30 string a/id the identification code in encoded form, to an 
exchange (34 ) . 



~3r37 A system according to Claim 11 or l^_c£LaJ^a^te^=f s S^^Lir 
that th e - terminal T2T Is arranged to store also, besides 
unique bit string and the identification code, a 
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Termihal iden tification code, protected wi th Cha aid "of thj 
first message authentication code and/or protected by 
encoding, on the information carrier (18) with memo] 



10 



15 



14. A system according to Claim 11, 12 or 13, 
characterised in that the printing device/(20) is arranged, 
after reading the information carrier/(18) , to render use 
of the unique bit string for printing a further franking 
mark on a further documpjjt impp^sible. 

15. A system according ira Claim 11, 12 or 13, 
characterised in tha^r the printing device (20) is arranged, 
after reading the/information carrier (18), to check 
whether the vajfue of a counter on the information carrier 
(18) lies wifthin predefined limits, and, if this is the 
case, ^/execute step c and to adjust the value of the 

ir after reading, and, if this is not the case, to 



20 16. A system according to Claim 10< characterised in that 
it comprises a computer (50) and /a printing device (62) 
connected thereto for executing/ step c. 
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17. A system according to Cl^aim 16, characterised in that 
the system is provided with means (70) arranged remotely 
from the computer (50) tp send the unique bit string, 
together with the identaf ication code, protected with a 
first message authentication code and/or protected by 
encoding, to said computer (50) and to send a copy of said 
data to an exchange (34). 



35 



18. A system according to Claim 16, characterised in that 
the computer Is provided with means (64) to print, with the 
aid of the pointing device (62), the unique bit string 
together with the identification code, protected with a 
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first message authentication code afad/or protected by 
encoding, on .the document, and optionally to send a copy of 
said data to an exchange (34). 



*Ttrr A system according to any of thy Claims^lU up" 

eluding 18, characterised in that the identification 
comprises a user identification code and/or printer 
identification code . 



10 20. A system according to any of the Claims AO up to and 

including 19, characterised in that the system is arranged 
to calculate and print, on the basis o$r the franking mark, 
a second message authentication cod^/and/or to print the 
franking mark in encoded form. 

15 

21. A system according tofoV^ of the Claims 10 up to and 
including 20, characterises in that the system further 
comprises a second central memory (40) for storing 
combinations of ider*tif ication codes and provided unique 
20 bit strings, central input means (44) for inputting 

franking marks/printed on documents, a third central memory 
(42) for storing the combinations of identification codes 
and uniqu/ bit strings present in the inputted franking 
marks, yand processor means (36) , connected to the central 
25 inpujf means and the first, second, and third central 

memories, for mutually comparing the data in the second and 
lird central memc 



22- An exchange (34) provided/with a first central memory 
30 (38), with a set of unique bit strings, a second central 
memory (40) for storing combinations of identification 
codes and provided uniqu^ bit strings, said combinations 
corresponding with f ranging marks (28) which are printed on 
a document (22) , cent/al input means (44) for inputting 
35 franking marks printfed on documents, and a third central 
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memory" (^2 
codes and 




ring combinations of identification 

^ strings present in the inputted 

franking marks, and processor means (36) , connected to the 
central input, means and the first, second, /third central 
memories, for mutually comparing data in ^he second and 
third central memories. 



23. Means for a 'device (20; 50) that/is arranged for 
printing a franking mark on a docuirfent (22) , said means at 

10 least being arranged for receiving data from an information 
carrier (18), said data at leas,t comprising a unique bit 
string originating from a set/of unique bit strings, for 
compiling and making data ay&ilable for the franking mark 
(28) for the document (22)/in protected form, so that said 

15 device (20; 50) can prints the franking mark (28) on the 

document securely, said/ franking mark at least comprising 
the said data as well an identification code. 

24. Means according to Claim 23, characterised in that 
20 they are arranged /o check, after reception of the data 

from the information carrier (18), whether the value of a 
counter on the yCnformation carrier (18) lies within 
predefined liraats, and, if this is the case, to instruct 
the informat/on carrier (18) to adjust the value of the 
25 counter, and, if this is not the case, to block the 
printing o£ the franking mark. 



25. An information carrier (1£H, provided with a memory 
which at least contains the/following data: a unique bit 
30 string, selected from a s^t ^ffwunique bit strings, an 

identification code an/ a i/essage authentication code which 
is calculated on th^basislof at least the unique bit 
string and the id^ntif icatrbr*— ecf€fe and/or the unique bit 
string and theyadentif ication code in encoded form. 

35 
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26. A computer-readable information carrier, provided with 
software, which, after being read, enables the computer to 
execute a method for printing a franking mark (28) on a 
document (22), comprising the following steps: 

5 a. the reception of a unique bix string; 

b. establishing an identification code; 

c. securely printing the f racking mark (28) on the 
document (22), said frapiking mark at least comprising 
information relating yb the bit string and the 

10 identification code; / 

where the bit string is/received from a centrally stored 
set of unique bit strings. 

27. A data carrier jwkve provided with software for 

15 downloading to a joomput/er, which, after being read, enables 
the computer to execute a method for printing a franking 
mark (28) on a (document (22), comprising the following 
steps: / 

a. the reception of a unique bit string; 
20 b. establishing an identification code; 

c. secured y printing the franking mark (28) on the 

document (22), said franking mark at least comprising 
information relating to the bit string and the 
identification code ; 
25 where' the bit string is received from a centrally stored 
set /of unique bit strings. 




